Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File:                     0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier:          /9K0cc2/12Vh+7yDJng1+LvjdWeuit6FFnCQW/tg7ek=
Subject key identifier:   07:DA:C7:5F:90:4E:69:16:AB:15:A0:A8:3E:E2:95:F5:3C:3D:10:CF
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer:       /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial:       019E311722EA900061048C08A130691B47C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number:          1427
Signing time:             Sat 16 May 2026 14:01:00 +0000
Manifest this update:     Sat 16 May 2026 14:01:00 +0000
Manifest next update:     Sun 17 May 2026 14:01:00 +0000
Files and hashes:         1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: xAHxiJku+RGhayy2p9cs8EgsNueCjRvdq881fm98zOs=)
                          2: vTP-a1JInjsi0zs43YUjMr0tQhw.roa (hash: AksN4qlHwN45fSCKy9ilLdGULzgppZOt64KCaKI1vlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:22:ea:90:00:61:04:8c:08:a1:30:69:1b:47:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
        Validity
            Not Before: May 16 14:01:00 2026 GMT
            Not After : May 17 14:01:00 2026 GMT
        Subject: CN=07dac75f904e6916ab15a0a83ee295f53c3d10cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:a6:e5:ff:08:62:55:dd:a0:e5:48:96:99:
                    90:84:1a:92:a5:72:74:c2:45:72:c6:2b:1b:13:4e:
                    4e:71:90:b7:25:53:14:fb:ec:16:e1:6b:16:72:85:
                    2a:2c:1a:86:e3:ac:e0:68:74:cc:1f:46:51:b5:b5:
                    38:78:76:91:b1:17:29:17:2e:b5:d0:b7:61:a2:46:
                    18:a7:53:57:fd:d4:b9:c1:f4:d9:e4:4f:98:18:35:
                    8e:d5:3b:75:92:05:04:ce:eb:d2:d3:3e:23:01:b0:
                    84:54:28:14:a6:bb:9a:3a:5c:a5:f7:02:66:1b:c2:
                    dc:39:24:62:e3:c4:7f:f5:0e:1a:66:17:f8:70:9a:
                    f5:3e:e3:16:11:6f:cf:89:3c:7d:50:f7:80:da:14:
                    e1:7b:83:d1:9b:de:96:95:f3:ef:e2:5a:e3:65:49:
                    3c:9a:0b:96:ab:40:c4:91:1e:16:6b:0d:41:80:71:
                    67:fd:c7:47:89:b1:a5:a9:73:20:60:48:91:e8:ea:
                    17:81:a5:e2:75:cb:c9:cf:17:16:81:dd:7c:a1:15:
                    fa:b5:b1:1e:ef:51:90:dc:ac:3f:f6:0e:39:f0:bd:
                    b5:9a:48:e3:ad:d0:01:da:6f:80:75:fd:c7:06:cf:
                    c8:33:34:ce:d8:d2:f9:01:e3:db:2a:f2:96:09:44:
                    07:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DA:C7:5F:90:4E:69:16:AB:15:A0:A8:3E:E2:95:F5:3C:3D:10:CF
            X509v3 Authority Key Identifier:
                keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a9:5a:8a:56:77:56:77:b1:8e:b6:52:f5:52:67:18:6a:b5:
         44:93:8d:92:4f:13:25:a3:79:59:c5:63:5a:11:56:e0:6d:6c:
         7e:79:3a:e3:d6:e2:f7:da:d6:4a:c1:e6:5d:5b:43:7e:76:b9:
         e5:d4:de:2a:d3:d0:79:03:09:56:72:ab:48:b1:b5:5b:be:39:
         e8:51:67:e6:19:31:66:dd:5b:2e:b4:cc:c6:96:b4:45:cc:90:
         9b:85:a4:a2:86:bb:fa:91:39:ff:c9:fb:86:6c:ed:67:2d:2a:
         d0:65:a7:06:72:fa:38:38:c2:0d:b5:0f:cf:a9:c5:26:7a:05:
         28:14:73:d9:5f:54:1f:e8:7f:ce:1f:ea:2a:ef:58:18:c6:26:
         de:75:03:c0:f5:08:f5:49:6a:7a:ae:de:59:e2:ff:fb:db:7d:
         7b:81:29:18:ac:15:b8:a2:a1:6f:9e:2d:83:2d:2b:b5:f0:b2:
         f8:28:a0:02:04:34:49:6e:b7:85:ac:18:ae:d4:85:20:e3:0f:
         6b:a6:08:c5:25:14:ea:90:92:b5:0f:b1:03:a8:e6:99:ab:e1:
         55:bb:b2:32:fe:f9:ad:b5:6b:d5:f5:f4:60:e2:76:f2:ec:0b:
         f3:a8:be:cb:9c:7e:4e:4d:3a:a4:d8:dc:76:3a:fe:cd:2d:35:
         ac:be:82:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xFyLqkABhBIwIoTBpG0fGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGJmMzFmZDkzNzljYWI1YzUwYWZkMzkyYTJlZTkwNTcx
ODgzNWYwHhcNMjYwNTE2MTQwMTAwWhcNMjYwNTE3MTQwMTAwWjAzMTEwLwYDVQQD
EygwN2RhYzc1ZjkwNGU2OTE2YWIxNWEwYTgzZWUyOTVmNTNjM2QxMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZam5f8IYlXdoOVIlpmQhBqSpXJ0
wkVyxisbE05OcZC3JVMU++wW4WsWcoUqLBqG46zgaHTMH0ZRtbU4eHaRsRcpFy61
0LdhokYYp1NX/dS5wfTZ5E+YGDWO1Tt1kgUEzuvS0z4jAbCEVCgUpruaOlyl9wJm
G8LcOSRi48R/9Q4aZhf4cJr1PuMWEW/PiTx9UPeA2hThe4PRm96WlfPv4lrjZUk8
mguWq0DEkR4Waw1BgHFn/cdHibGlqXMgYEiR6OoXgaXidcvJzxcWgd18oRX6tbEe
71GQ3Kw/9g458L21mkjjrdAB2m+Adf3HBs/IMzTO2NL5AePbKvKWCUQHUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfax1+QTmkWqxWgqD7ilfU8PRDPMB8GA1UdIwQY
MBaAFNHb8x/ZN5yrXFCv05Ki7pBXGINfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUt
OGUwYjNmNTg5N2I5LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUtOGUwYjNmNTg5N2I5
LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6lailZ3
VnexjrZS9VJnGGq1RJONkk8TJaN5WcVjWhFW4G1sfnk649bi99rWSsHmXVtDfna5
5dTeKtPQeQMJVnKrSLG1W7456FFn5hkxZt1bLrTMxpa0RcyQm4Wkooa7+pE5/8n7
hmztZy0q0GWnBnL6ODjCDbUPz6nFJnoFKBRz2V9UH+h/zh/qKu9YGMYm3nUDwPUI
9Ulqeq7eWeL/+9t9e4EpGKwVuKKhb54tgy0rtfCy+CigAgQ0SW63hawYrtSFIOMP
a6YIxSUU6pCStQ+xA6jmmavhVbuyMv75rbVr1fX0YOJ28uwL86i+y5x+Tk06pNjc
djr+zS01rL6C0w==
-----END CERTIFICATE-----
Generated at Sat May 16 17:57:00 2026 by rpki-client